Oh, perhaps this is the right place in the thread to discuss the issue ofwhat to do with file capabilities? I'm ok waiting until the next iterationto even discuss it, so long as we start by refusing setting of fcaps byany task not in init_user_ns.